authlib icon indicating copy to clipboard operation
authlib copied to clipboard

The ultimate Python library in building OAuth, OpenID Connect clients and servers. JWS,JWE,JWK,JWA,JWT included.

Results 186 authlib issues
Sort by recently updated
recently updated
newest added

Hello team! I'm implementing Authlib in an app I'm working on, thank you for your good work! While reading the docs, I realized the name GitHub was missing a T,...

**Describe the bug** In case of using AsyncOAuth2Client with client credential I'm obtaining a TypeError exception after token expiration when making POST request. **Error Stacks** ```json { "exc_type": "TypeError", "exc_value":...

role:client

**Is your feature request related to a problem? Please describe.** Pypi mentions support for Python 3.11. Is there a roadmap towards support for Python 3.12? Or is there a way...

Hello, We have encountered an issue with the Authlib library's dependency management, specifically related to the cryptography package. The current setup.py includes an "unpinned" version specification for cryptography, as shown...

wontfix

I'm dealing with an Authorization Server that requires PKCE, but only support `plain` challenge method. For this reason, out-of-the-box RFC7636 support does not do the trick for me, since it...

feature request

**Describe the bug** No matter which key format I use, I cannot use EdDSA to decode JWTs. **Error Stacks** ``` ValueError: ('Could not deserialize key data. The data may be...

bug

> DO NOT SEND ANY SECURITY FIX HERE. Please read "Security Reporting" section > on README. **What kind of change does this PR introduce?** (check at least one) - [X]...

Hello! I don't need to add a token to the store. I want to set the updated token in request.session. Is it possible? I use this demo https://github.com/authlib/demo-oauth-client/blob/master/fastapi-twitter-login/app.py ```python async...

question
role:client

When token introspection was introduced in 6f5d19a, using the code that previously only handled token revocation, the new `_handle_token_hint` method that does the work for both `introspect_token` and `revoke_token` kept...

**Describe the bug** If I pass `client_credentials` as the `grant_type` it will not automatically fetch the new token. **To Reproduce** My code where I pass the `grant_type`. ``` self.oauth2client =...

role:client